DNSSEC Analyzer - dnscrypt.pl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-21 03:25:55 UTC, NTP stratum 4

Analyzing DNSSEC problems for dnscrypt.pl

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1425 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1425 bytes) ;; HEADER SECTION ;; id = 22017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to e.root-servers.net for dnscrypt.pl/A
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for dnscrypt.pl/A: 'IPv6 transport disabled'
	Received 943 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (943 bytes) ;; HEADER SECTION ;; id = 9133 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS c-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS e-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS g-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS i-dns.pl. pl. 86400 IN DS ( 57374 8 2 93e8fa22cc596aed57fc2d2093353d46077413356ffb2a3bf9cdcf6d1951d1ad ) pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . f5Mudyw9FKvvtP3T6xfo9OCIp/fm5L0MpWQYI0KD50GR9Pqar329Fv/A6/73LCVvkbxw8xi6cMbM HcjShnFaVCCbwtdMO6JqRg6oM4CsVm0XCTx+SnrvIEUYpcI9LLJ7bwxAc6m/5nMsDIKCxD0GJjhX RvA5Uwl7QCjdBNLivihxZjmkMX/DDVIcWoLwRbTAWYlhMyXhRCKsYMUYQHoi4JcSs4DMkgeZMTC8 9hwXiloBbQzd8eyU7mCZuuxV/gfXluPXlv55xWzgrtL1bpYJPrEwHBON4YbEKBH8RKBwjbJ8JT1O 6M+wZwtVwnoHR5fs3jb3YgHu3uOol+YS01xFow== ) ;; ADDITIONAL SECTION (17 records) a-dns.pl. 172800 IN A 194.181.87.156 b-dns.pl. 172800 IN A 192.195.72.53 c-dns.pl. 172800 IN A 93.190.128.146 d-dns.pl. 172800 IN A 81.15.133.186 e-dns.pl. 172800 IN A 46.28.245.82 f-dns.pl. 172800 IN A 77.79.212.238 g-dns.pl. 172800 IN A 149.156.1.252 h-dns.pl. 172800 IN A 194.0.1.2 i-dns.pl. 172800 IN A 156.154.100.15 a-dns.pl. 172800 IN AAAA 2001:a10:121:1::156 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 c-dns.pl. 172800 IN AAAA 2a02:38:14::146 d-dns.pl. 172800 IN AAAA 2a00:4120:8000:2::186 f-dns.pl. 172800 IN AAAA 2001:1a68:0:17::238 g-dns.pl. 172800 IN AAAA 2001:6d8:1001:1::252 h-dns.pl. 172800 IN AAAA 2001:678:4::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for pl/DNSKEY
	Received 934 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (934 bytes) ;; HEADER SECTION ;; id = 24946 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS c-dns.pl. pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS g-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS i-dns.pl. pl. 172800 IN NS e-dns.pl. pl. 86400 IN DS ( 57374 8 2 93e8fa22cc596aed57fc2d2093353d46077413356ffb2a3bf9cdcf6d1951d1ad ) pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . f5Mudyw9FKvvtP3T6xfo9OCIp/fm5L0MpWQYI0KD50GR9Pqar329Fv/A6/73LCVvkbxw8xi6cMbM HcjShnFaVCCbwtdMO6JqRg6oM4CsVm0XCTx+SnrvIEUYpcI9LLJ7bwxAc6m/5nMsDIKCxD0GJjhX RvA5Uwl7QCjdBNLivihxZjmkMX/DDVIcWoLwRbTAWYlhMyXhRCKsYMUYQHoi4JcSs4DMkgeZMTC8 9hwXiloBbQzd8eyU7mCZuuxV/gfXluPXlv55xWzgrtL1bpYJPrEwHBON4YbEKBH8RKBwjbJ8JT1O 6M+wZwtVwnoHR5fs3jb3YgHu3uOol+YS01xFow== ) ;; ADDITIONAL SECTION (17 records) a-dns.pl. 172800 IN A 194.181.87.156 b-dns.pl. 172800 IN A 192.195.72.53 c-dns.pl. 172800 IN A 93.190.128.146 d-dns.pl. 172800 IN A 81.15.133.186 e-dns.pl. 172800 IN A 46.28.245.82 f-dns.pl. 172800 IN A 77.79.212.238 g-dns.pl. 172800 IN A 149.156.1.252 h-dns.pl. 172800 IN A 194.0.1.2 i-dns.pl. 172800 IN A 156.154.100.15 a-dns.pl. 172800 IN AAAA 2001:a10:121:1::156 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 c-dns.pl. 172800 IN AAAA 2a02:38:14::146 d-dns.pl. 172800 IN AAAA 2a00:4120:8000:2::186 f-dns.pl. 172800 IN AAAA 2001:1a68:0:17::238 g-dns.pl. 172800 IN AAAA 2001:6d8:1001:1::252 h-dns.pl. 172800 IN AAAA 2001:678:4::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pl

	Checking DS between . and pl
	Query to c.root-servers.net for pl/DS
	Received 414 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (414 bytes) ;; HEADER SECTION ;; id = 51109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DS ;; ANSWER SECTION (3 records) pl. 86400 IN DS ( 57374 8 2 93e8fa22cc596aed57fc2d2093353d46077413356ffb2a3bf9cdcf6d1951d1ad ) pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . f5Mudyw9FKvvtP3T6xfo9OCIp/fm5L0MpWQYI0KD50GR9Pqar329Fv/A6/73LCVvkbxw8xi6cMbM HcjShnFaVCCbwtdMO6JqRg6oM4CsVm0XCTx+SnrvIEUYpcI9LLJ7bwxAc6m/5nMsDIKCxD0GJjhX RvA5Uwl7QCjdBNLivihxZjmkMX/DDVIcWoLwRbTAWYlhMyXhRCKsYMUYQHoi4JcSs4DMkgeZMTC8 9hwXiloBbQzd8eyU7mCZuuxV/gfXluPXlv55xWzgrtL1bpYJPrEwHBON4YbEKBH8RKBwjbJ8JT1O 6M+wZwtVwnoHR5fs3jb3YgHu3uOol+YS01xFow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for pl in the . zone
	DS=57374/SHA-256 has algorithm RSASHA256
	DS=25412/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pl. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . f5Mudyw9FKvvtP3T6xfo9OCIp/fm5L0MpWQYI0KD50GR9Pqar329Fv/A6/73LCVvkbxw8xi6cMbM HcjShnFaVCCbwtdMO6JqRg6oM4CsVm0XCTx+SnrvIEUYpcI9LLJ7bwxAc6m/5nMsDIKCxD0GJjhX RvA5Uwl7QCjdBNLivihxZjmkMX/DDVIcWoLwRbTAWYlhMyXhRCKsYMUYQHoi4JcSs4DMkgeZMTC8 9hwXiloBbQzd8eyU7mCZuuxV/gfXluPXlv55xWzgrtL1bpYJPrEwHBON4YbEKBH8RKBwjbJ8JT1O 6M+wZwtVwnoHR5fs3jb3YgHu3uOol+YS01xFow== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=57374/SHA-256 is now in the chain-of-trust
	DS=25412/SHA-256 is now in the chain-of-trust
	`pl. 86400 IN DS ( 57374 8 2 93e8fa22cc596aed57fc2d2093353d46077413356ffb2a3bf9cdcf6d1951d1ad )`
	`pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 )`
	Query to e-dns.pl for pl/DNSKEY
	Received 1621 bytes from 46.28.245.82
	;; Answer received from 46.28.245.82 (1621 bytes) ;; HEADER SECTION ;; id = 55879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (7 records) pl. 3600 IN DNSKEY ( 256 3 8 AwEAAeLSzetSIY7jdaHJZZhLP9B9D4wGhoTWFQTanDQAIqyeubgprEgU9+dGNcOFbBVMJe191Y4j p9fOvV9KHMpbjNfARZ4ZLGqRXvEUyWWelqbKNAIpQch7gf6aidgWZiYyy8hkAYcoimmdeSr3g1pS mfSbXV9C2wEQUA8WjtLoqzZJ ) ; Key ID = 39205 pl. 3600 IN DNSKEY ( 256 3 8 AwEAAdOq+ReahS90X1b1VGS+3COWXxyH4X9AoYFevUpJ0TC01N5ztcekT+KFEfipTD8cPtdKjNzk yLnmmm2L3r9w6dbjbZrIfVlzNfkOtmE+iW8fZ71FOacNwieUOetzEf3Z1nSVHgAypDrC6jAXHeVy 16DXYjRQD/30RkaK6YTzgrrX ) ; Key ID = 54420 pl. 3600 IN DNSKEY ( 257 3 8 AwEAAYakPOFjg+Kxc77WCi7o+BkzZvBqEunzXdJwwRg0By4dt5XDwioocQpTJo2hRaqfp5Ee6NjG iQ2nB8y7CY2IW/8Chuz1jZaD/rd6LXwUwmdGkFX3Te+cY40OI1k1/T06IK9IV9Lc9WwosMEwig0U 5JGGGdzSotD3d3zvouuRVAbS2Tyq6bW6UqyM5Lc2km5YSKsEFlOKZjGJnTpckD0xHO9Y0DNkvvrl hX2C7QXG3W7H4ffS4kJjT3RRcMOpM2AcwsG1JQx/aOnZSx8dvWyEgw5WBP4WWm4ihuAT7U6d301O CVppPvbZwjKpXKo6Q3yjmDLWwJL9ovTz5SJGXN9mpBs= ) ; Key ID = 25412 pl. 3600 IN DNSKEY ( 257 3 8 AwEAAd9uWBc56J5pd9GCztiI4fdSU35LkfwblW6x6ZgrKPHKP+92tPJshsoGFCME+5eqaiCLpMqV T+zyR1B+73ZBTFl5JEo5b8ufPzltlg+XNx05X1xzxcjV5KhnsR4hvcEL1yLK0o0cZG4Fa+YLVie8 goYo8eZrVvux9H0Ixxb6g98dexaKpX52fwEuR9UzOd3VyaM/BxU/qPGvtkUvmPVJ8zgNGAwx4wYY OqWe0gyh5orG7DN0ojUxQidwBp4SouOTH4ZMQNn31qGZ/Dn2rttZc4tR19RAjuOIgfA1XaPs4nge AzU78aRM+KMBXEwu9e0ggoXtbmcI1HJsdS2JyZ/x3LU= ) ; Key ID = 57374 pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 25412 pl. SY8q90SRk0brHlmtKXkcJ4mReoVc/oGSFofOy8B03RvsHohPpUZNIhHcpyweN85BZ8e8pLatjgxJ lAXWblLj7KgAPJO4GIIX/7NG4TfURQ3x76NGW3mBwmcOHeVEykfE1J8l6RuX6cYF5iRnNP9gpuKP 0erd1s/EzuoCmXuB2jhG4wNVCIp1jsI8QNDyfdLhSI2jJguIhtmKgdhiL6nW4EJlcGCnC6jfX5ew inKfYL+/nS1YbMGZIMfLWAyMRJ5LxwiIm0pzljm7Vv1KwjE7xp8nv7PHRJUG0ylF5vj8sJKQalE6 V5XiCn3LQgVckbgBoZo8D+wskuJWvPSTQHmMCw== ) pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 54420 pl. JFNdMjlplgnm3t0IJ1tQgMB1H79cidh8VPR02V6jHJC3zLJhbicrfslhZ7PCCXaLStO2syezskSw imZzYwbVVuekO535bZSgA8pX5YDvOR2mq9l3JchSZSrKe06yj7y1agCStRX2sur0Wpcgo0Iu0JVd gCTzSaaKlHqXHhU26kk= ) pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 57374 pl. RFe4iecGENeCYpcshOz4RT9SS+n+KGeXOWV8fvdmlG0USNvCZrO6WlBPGQICkgsQcn3gqr/NhVMH cqMJfb7PJelUCXAC6QAQSRJgNSphoSUPgFQSBCENag7UYyeB2kz+HIBRAxbvf0Y/4mYSXQ/7xOc5 jSGCy9bw0UrNujFYWcYEmbAycOd9/DsBgw8PsmtoQmWTWLLNWOmlbLb2bNZsP0++iiA6HUCFzJ6d pBqRgeYf8NbtJ6P1z8H/LpNzlPke9TMV4bBKj4yhA2diOEI62/REus5hQaKx0hOjJpPWqP/KIxKX OSgWLEl6luP2NthDphJzFRtpYs3Z5TFt3LF56g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for pl
	`pl. 3600 IN DNSKEY ( 256 3 8 AwEAAeLSzetSIY7jdaHJZZhLP9B9D4wGhoTWFQTanDQAIqyeubgprEgU9+dGNcOFbBVMJe191Y4j p9fOvV9KHMpbjNfARZ4ZLGqRXvEUyWWelqbKNAIpQch7gf6aidgWZiYyy8hkAYcoimmdeSr3g1pS mfSbXV9C2wEQUA8WjtLoqzZJ ) ; Key ID = 39205`
	`pl. 3600 IN DNSKEY ( 256 3 8 AwEAAdOq+ReahS90X1b1VGS+3COWXxyH4X9AoYFevUpJ0TC01N5ztcekT+KFEfipTD8cPtdKjNzk yLnmmm2L3r9w6dbjbZrIfVlzNfkOtmE+iW8fZ71FOacNwieUOetzEf3Z1nSVHgAypDrC6jAXHeVy 16DXYjRQD/30RkaK6YTzgrrX ) ; Key ID = 54420`
	`pl. 3600 IN DNSKEY ( 257 3 8 AwEAAYakPOFjg+Kxc77WCi7o+BkzZvBqEunzXdJwwRg0By4dt5XDwioocQpTJo2hRaqfp5Ee6NjG iQ2nB8y7CY2IW/8Chuz1jZaD/rd6LXwUwmdGkFX3Te+cY40OI1k1/T06IK9IV9Lc9WwosMEwig0U 5JGGGdzSotD3d3zvouuRVAbS2Tyq6bW6UqyM5Lc2km5YSKsEFlOKZjGJnTpckD0xHO9Y0DNkvvrl hX2C7QXG3W7H4ffS4kJjT3RRcMOpM2AcwsG1JQx/aOnZSx8dvWyEgw5WBP4WWm4ihuAT7U6d301O CVppPvbZwjKpXKo6Q3yjmDLWwJL9ovTz5SJGXN9mpBs= ) ; Key ID = 25412`
	`pl. 3600 IN DNSKEY ( 257 3 8 AwEAAd9uWBc56J5pd9GCztiI4fdSU35LkfwblW6x6ZgrKPHKP+92tPJshsoGFCME+5eqaiCLpMqV T+zyR1B+73ZBTFl5JEo5b8ufPzltlg+XNx05X1xzxcjV5KhnsR4hvcEL1yLK0o0cZG4Fa+YLVie8 goYo8eZrVvux9H0Ixxb6g98dexaKpX52fwEuR9UzOd3VyaM/BxU/qPGvtkUvmPVJ8zgNGAwx4wYY OqWe0gyh5orG7DN0ojUxQidwBp4SouOTH4ZMQNn31qGZ/Dn2rttZc4tR19RAjuOIgfA1XaPs4nge AzU78aRM+KMBXEwu9e0ggoXtbmcI1HJsdS2JyZ/x3LU= ) ; Key ID = 57374`
	DNSKEY=25412/SEP is now in the chain-of-trust
	DS=25412/SHA-256 verifies DNSKEY=25412/SEP
	DNSKEY=57374/SEP is now in the chain-of-trust
	DS=57374/SHA-256 verifies DNSKEY=57374/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 25412 pl. SY8q90SRk0brHlmtKXkcJ4mReoVc/oGSFofOy8B03RvsHohPpUZNIhHcpyweN85BZ8e8pLatjgxJ lAXWblLj7KgAPJO4GIIX/7NG4TfURQ3x76NGW3mBwmcOHeVEykfE1J8l6RuX6cYF5iRnNP9gpuKP 0erd1s/EzuoCmXuB2jhG4wNVCIp1jsI8QNDyfdLhSI2jJguIhtmKgdhiL6nW4EJlcGCnC6jfX5ew inKfYL+/nS1YbMGZIMfLWAyMRJ5LxwiIm0pzljm7Vv1KwjE7xp8nv7PHRJUG0ylF5vj8sJKQalE6 V5XiCn3LQgVckbgBoZo8D+wskuJWvPSTQHmMCw== )`
	`pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 54420 pl. JFNdMjlplgnm3t0IJ1tQgMB1H79cidh8VPR02V6jHJC3zLJhbicrfslhZ7PCCXaLStO2syezskSw imZzYwbVVuekO535bZSgA8pX5YDvOR2mq9l3JchSZSrKe06yj7y1agCStRX2sur0Wpcgo0Iu0JVd gCTzSaaKlHqXHhU26kk= )`
	`pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190321120000 20190219120000 57374 pl. RFe4iecGENeCYpcshOz4RT9SS+n+KGeXOWV8fvdmlG0USNvCZrO6WlBPGQICkgsQcn3gqr/NhVMH cqMJfb7PJelUCXAC6QAQSRJgNSphoSUPgFQSBCENag7UYyeB2kz+HIBRAxbvf0Y/4mYSXQ/7xOc5 jSGCy9bw0UrNujFYWcYEmbAycOd9/DsBgw8PsmtoQmWTWLLNWOmlbLb2bNZsP0++iiA6HUCFzJ6d pBqRgeYf8NbtJ6P1z8H/LpNzlPke9TMV4bBKj4yhA2diOEI62/REus5hQaKx0hOjJpPWqP/KIxKX OSgWLEl6luP2NthDphJzFRtpYs3Z5TFt3LF56g== )`
	RRSIG=25412 and DNSKEY=25412/SEP verifies the DNSKEY RRset
	RRSIG=54420 and DNSKEY=54420 verifies the DNSKEY RRset
	RRSIG=57374 and DNSKEY=57374/SEP verifies the DNSKEY RRset
	DNSKEY=39205 is now in the chain-of-trust
	DNSKEY=54420 is now in the chain-of-trust
	Query to e-dns.pl for dnscrypt.pl/A
	Received 535 bytes from 46.28.245.82
	;; Answer received from 46.28.245.82 (535 bytes) ;; HEADER SECTION ;; id = 5188 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dnscrypt.pl. 86400 IN NS fns2.42.pl. dnscrypt.pl. 86400 IN NS fns1.42.pl. dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190321120000 20190219120000 54420 pl. zI9R+0kCyLZAEJTHnEe9r9pRab2DW5D+IBn27uyxX/qbmHd9PBNfkxmgEWmpDCIEkxXdkAzDCVRK /Q7X2ULGcHDXtxMQAH5tBB3RgXXL9E7ILLCQkLty5Sby7K5YIa11Bvr2uXYNc2FegPTL51etjiO/ mkkSlZ99uF3iQnHSjPM= ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a-dns.pl for dnscrypt.pl/DNSKEY
	Error querying a-dns.pl/2001:a10:121:1:0:0:0:156 for dnscrypt.pl/DNSKEY: 'IPv6 transport disabled'
	Received 535 bytes from 194.181.87.156
	;; Answer received from 194.181.87.156 (535 bytes) ;; HEADER SECTION ;; id = 42861 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dnscrypt.pl. 86400 IN NS fns2.42.pl. dnscrypt.pl. 86400 IN NS fns1.42.pl. dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190321120000 20190219120000 54420 pl. zI9R+0kCyLZAEJTHnEe9r9pRab2DW5D+IBn27uyxX/qbmHd9PBNfkxmgEWmpDCIEkxXdkAzDCVRK /Q7X2ULGcHDXtxMQAH5tBB3RgXXL9E7ILLCQkLty5Sby7K5YIa11Bvr2uXYNc2FegPTL51etjiO/ mkkSlZ99uF3iQnHSjPM= ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnscrypt.pl

dnscrypt.pl

	Checking DS between pl and dnscrypt.pl
	Query to e-dns.pl for dnscrypt.pl/DS
	Received 434 bytes from 46.28.245.82
	;; Answer received from 46.28.245.82 (434 bytes) ;; HEADER SECTION ;; id = 39000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DS ;; ANSWER SECTION (6 records) dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190321120000 20190219120000 54420 pl. zI9R+0kCyLZAEJTHnEe9r9pRab2DW5D+IBn27uyxX/qbmHd9PBNfkxmgEWmpDCIEkxXdkAzDCVRK /Q7X2ULGcHDXtxMQAH5tBB3RgXXL9E7ILLCQkLty5Sby7K5YIa11Bvr2uXYNc2FegPTL51etjiO/ mkkSlZ99uF3iQnHSjPM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DS records for dnscrypt.pl in the pl zone
	DS=55059/SHA-1 has algorithm ECDSAP256SHA256
	DS=65416/SHA-1 has algorithm RSASHA1
	DS=65416/SHA-256 has algorithm RSASHA1
	DS=55059/SHA-384 has algorithm ECDSAP256SHA256
	DS=55059/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190321120000 20190219120000 54420 pl. zI9R+0kCyLZAEJTHnEe9r9pRab2DW5D+IBn27uyxX/qbmHd9PBNfkxmgEWmpDCIEkxXdkAzDCVRK /Q7X2ULGcHDXtxMQAH5tBB3RgXXL9E7ILLCQkLty5Sby7K5YIa11Bvr2uXYNc2FegPTL51etjiO/ mkkSlZ99uF3iQnHSjPM= )`
	RRSIG=54420 and DNSKEY=54420 verifies the DS RRset
	DS=55059/SHA-1 is now in the chain-of-trust
	DS=65416/SHA-1 is now in the chain-of-trust
	`dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 )`
	`dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa`
	`dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad )`
	`dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 )`
	`dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c )`
	Query to fns2.42.pl for dnscrypt.pl/DNSKEY
	Received 1753 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1753 bytes) ;; HEADER SECTION ;; id = 1647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DNSKEY ;; ANSWER SECTION (9 records) dnscrypt.pl. 86400 IN DNSKEY ( 257 3 13 QzLzER8zqj1erIGmNMsveASyDGRMeeHRAH7MMW0hlKUCVhuNSQQtBgaD6O9rzGcuwfo88wLK21+T ZB6th6wTsQ== ) ; Key ID = 55059 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 5 AwEAAaxQ3TNqP2t2a3Xud8jaxlz9j6VZCb8X2FIeP6lw1vWOKJeYz4lbn+Z06SVKqOkv4bhrn0gj Uj/IYQucCRdgMLnONqf3wE6MKZpV38EqAFzSejwhIz8z1d2L77vwjltoqDDBvzWVXh/rsBz8Vfqo AQJdm1ZbX4MjJEnpCrdIZMjT ) ; Key ID = 1651 dnscrypt.pl. 86400 IN DNSKEY ( 257 3 7 AwEAAadDftarD59ThGhwgKsFxDeoK0tOMqw7eF1GTyP6o91FXMTDe5JGBk02tTNsjXYXRp45r8r1 +hYWxlhAhn7M7i7A80AFMjtgjJXaD+XIMFEYVrN2u9JCcSXudl35stEA2DdvWgXHWCaEcsuFbsp3 w9Sda2p0f1EC5VWXpbxlY374iDrmUkPyapvo95Et1Ju5iN9IWJ9jyCxGetqCqlGJQ9Ft2WIgDE9F SORY+gXT1TXXBXT2Qnuy1w45T+o04KI0YjYnErvpj7RYf2tJOFJ8UPh9sErQwv624v56Nsrxp805 cTtqa2txSbbn1hAqwAf0C/xitkJ7eP8BbH6B79UtJOc= ) ; Key ID = 5991 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 7 AwEAAdt2f8TLF/co9/Ofpl7gBIycr86nFCDvms+axcVg4WhQxvpndQ0H7D51OEuIA6gRKKSgf0G3 qzW6B8Uk2ZfcCDaQu/Ah89VeG9IsYNtw2xWvBJ1H+XZZ/Ir8s2qndZTcqyDy6qdVawaGzpf5NlhA kTGgVbiu9XmzJi87NA4/a3v7 ) ; Key ID = 1802 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 13 sm96Lx1jdi5iHD9ekAU/wSNV0q98ld9jc+cxQWyiz9leH9KG5qLtP5xR4yGF6SJKC+zrWdIOXE+M CCgq+MxyYA== ) ; Key ID = 55894 dnscrypt.pl. 86400 IN DNSKEY ( 257 3 5 AwEAAb0nuyrN1aAFcXiXoPl1SRNTFLAHRmkAmroyPyFYsKpTVEvJ0h8GvOVk3ZdDgP6ZxzJxCTga YWJTrei8gov/ymNiAkGxhQVdVFsqPuztXTNpycNY4BSqlZm2yS/Tf3P+Ak5Ou++D8NYryYxvoAO0 W9xi2qApZ9KSLKBNyO0XbFy5akztuCZZv/ljJpLbitPu/SWOClotdaCR3rX6sHQt1uj7MbT/PFha +niiRctYAOsqfBhvmsDpeHydFKCQRCY288yvE+ZYCBwPM1B9shJRhsJoWIUuHeBVlYd4lANu1yYN wWYDTJ60IJb+DSK2jC11fR4htRAZRciJzS3RUP9aC8U= ) ; Key ID = 65416 dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 5 2 86400 20190303181855 20190217181855 65416 dnscrypt.pl. oKKpCxKCnyPGPFxBFPk+nr2It4HgM3XNkFVMcizf+pBo4eFgRMNV3dOtDeXHQRJUK4PAHXFLF8Ce SqB/GuZfaq/gqENS94WllRYj9evZweORNJEz4O+bZ+QtkmIl0imvIUJNwrY0o1izGziqtpqqkFae vWnqOFdLeU+GZ1BobBTegWtvHiCLIjjGAQiPrV4sUeo+GKE7qGUyhhMQCzFjp8kxl9+Z+rMNAdl/ RgbuebNkadFXM+RCw+kJ7eJbzKCFrfwWERzSad3+PV1eo1YWLpeWvFNbBc8sMGa9KOfa/mIj9ZmQ xCPKaIZ1VtD+RBUfEUK5oBpnmD5e04lQpwwLgw== ) dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190303181855 20190217181855 5991 dnscrypt.pl. CULfyv6r2IlfONGlYoq6AYnC5xLXtVNv38QnEUWSoMA8CW0OM/4E6hULXHL6bwMrAfmAPN999aNy x/OJLWxvNJMZWP0VLs6RCa3knHkE3jg8DZjmTJrY3l0+neyX5ouVySjI2UtIPd1ShudCA8epXQUO z5YUhlaZWYd4TwJTGxpPsHBVpSsLQ/xR7ONlZTbbf12gmWFUlDgdn6EHbgn5iCq+eAAxeQ7mZYIt IKHY2O4iy8BQ81+ygL2QZGg4jIy+4X1JBsXacGsWrzTz742uG5lXKssaW5Tc7bAD8iabVb42b/I0 6/WrlgyJ7LZcV17vn/rF+BPRUo1YIW5jMoqeRQ== ) dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20190303181855 20190217181855 55059 dnscrypt.pl. LKgEHtqSVqn0aThEY1Gvedti/om9Zh+S/e/2HL8YNJbKLLNLSMC+mH+mmiL/DKx6PvOXEOvY9daL KKtGO8u4Ow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 6 DNSKEY records for dnscrypt.pl
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 13 QzLzER8zqj1erIGmNMsveASyDGRMeeHRAH7MMW0hlKUCVhuNSQQtBgaD6O9rzGcuwfo88wLK21+T ZB6th6wTsQ== ) ; Key ID = 55059`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 5 AwEAAaxQ3TNqP2t2a3Xud8jaxlz9j6VZCb8X2FIeP6lw1vWOKJeYz4lbn+Z06SVKqOkv4bhrn0gj Uj/IYQucCRdgMLnONqf3wE6MKZpV38EqAFzSejwhIz8z1d2L77vwjltoqDDBvzWVXh/rsBz8Vfqo AQJdm1ZbX4MjJEnpCrdIZMjT ) ; Key ID = 1651`
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 7 AwEAAadDftarD59ThGhwgKsFxDeoK0tOMqw7eF1GTyP6o91FXMTDe5JGBk02tTNsjXYXRp45r8r1 +hYWxlhAhn7M7i7A80AFMjtgjJXaD+XIMFEYVrN2u9JCcSXudl35stEA2DdvWgXHWCaEcsuFbsp3 w9Sda2p0f1EC5VWXpbxlY374iDrmUkPyapvo95Et1Ju5iN9IWJ9jyCxGetqCqlGJQ9Ft2WIgDE9F SORY+gXT1TXXBXT2Qnuy1w45T+o04KI0YjYnErvpj7RYf2tJOFJ8UPh9sErQwv624v56Nsrxp805 cTtqa2txSbbn1hAqwAf0C/xitkJ7eP8BbH6B79UtJOc= ) ; Key ID = 5991`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 7 AwEAAdt2f8TLF/co9/Ofpl7gBIycr86nFCDvms+axcVg4WhQxvpndQ0H7D51OEuIA6gRKKSgf0G3 qzW6B8Uk2ZfcCDaQu/Ah89VeG9IsYNtw2xWvBJ1H+XZZ/Ir8s2qndZTcqyDy6qdVawaGzpf5NlhA kTGgVbiu9XmzJi87NA4/a3v7 ) ; Key ID = 1802`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 13 sm96Lx1jdi5iHD9ekAU/wSNV0q98ld9jc+cxQWyiz9leH9KG5qLtP5xR4yGF6SJKC+zrWdIOXE+M CCgq+MxyYA== ) ; Key ID = 55894`
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 5 AwEAAb0nuyrN1aAFcXiXoPl1SRNTFLAHRmkAmroyPyFYsKpTVEvJ0h8GvOVk3ZdDgP6ZxzJxCTga YWJTrei8gov/ymNiAkGxhQVdVFsqPuztXTNpycNY4BSqlZm2yS/Tf3P+Ak5Ou++D8NYryYxvoAO0 W9xi2qApZ9KSLKBNyO0XbFy5akztuCZZv/ljJpLbitPu/SWOClotdaCR3rX6sHQt1uj7MbT/PFha +niiRctYAOsqfBhvmsDpeHydFKCQRCY288yvE+ZYCBwPM1B9shJRhsJoWIUuHeBVlYd4lANu1yYN wWYDTJ60IJb+DSK2jC11fR4htRAZRciJzS3RUP9aC8U= ) ; Key ID = 65416`
	DNSKEY=55059/SEP is now in the chain-of-trust
	DS=55059/SHA-1 verifies DNSKEY=55059/SEP
	DS=55059/SHA-384 verifies DNSKEY=55059/SEP
	DS=55059/SHA-256 verifies DNSKEY=55059/SEP
	DNSKEY=65416/SEP is now in the chain-of-trust
	DS=65416/SHA-1 verifies DNSKEY=65416/SEP
	DS=65416/SHA-256 verifies DNSKEY=65416/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 5 2 86400 20190303181855 20190217181855 65416 dnscrypt.pl. oKKpCxKCnyPGPFxBFPk+nr2It4HgM3XNkFVMcizf+pBo4eFgRMNV3dOtDeXHQRJUK4PAHXFLF8Ce SqB/GuZfaq/gqENS94WllRYj9evZweORNJEz4O+bZ+QtkmIl0imvIUJNwrY0o1izGziqtpqqkFae vWnqOFdLeU+GZ1BobBTegWtvHiCLIjjGAQiPrV4sUeo+GKE7qGUyhhMQCzFjp8kxl9+Z+rMNAdl/ RgbuebNkadFXM+RCw+kJ7eJbzKCFrfwWERzSad3+PV1eo1YWLpeWvFNbBc8sMGa9KOfa/mIj9ZmQ xCPKaIZ1VtD+RBUfEUK5oBpnmD5e04lQpwwLgw== )`
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190303181855 20190217181855 5991 dnscrypt.pl. CULfyv6r2IlfONGlYoq6AYnC5xLXtVNv38QnEUWSoMA8CW0OM/4E6hULXHL6bwMrAfmAPN999aNy x/OJLWxvNJMZWP0VLs6RCa3knHkE3jg8DZjmTJrY3l0+neyX5ouVySjI2UtIPd1ShudCA8epXQUO z5YUhlaZWYd4TwJTGxpPsHBVpSsLQ/xR7ONlZTbbf12gmWFUlDgdn6EHbgn5iCq+eAAxeQ7mZYIt IKHY2O4iy8BQ81+ygL2QZGg4jIy+4X1JBsXacGsWrzTz742uG5lXKssaW5Tc7bAD8iabVb42b/I0 6/WrlgyJ7LZcV17vn/rF+BPRUo1YIW5jMoqeRQ== )`
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20190303181855 20190217181855 55059 dnscrypt.pl. LKgEHtqSVqn0aThEY1Gvedti/om9Zh+S/e/2HL8YNJbKLLNLSMC+mH+mmiL/DKx6PvOXEOvY9daL KKtGO8u4Ow== )`
	RRSIG=65416 and DNSKEY=65416/SEP verifies the DNSKEY RRset
	RRSIG=5991 and DNSKEY=5991/SEP verifies the DNSKEY RRset
	RRSIG=55059 and DNSKEY=55059/SEP verifies the DNSKEY RRset
	DNSKEY=1651 is now in the chain-of-trust
	DNSKEY=5991/SEP is now in the chain-of-trust
	DNSKEY=1802 is now in the chain-of-trust
	DNSKEY=55894 is now in the chain-of-trust
	Query to fns2.42.pl for dnscrypt.pl/A
	Received 1055 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1055 bytes) ;; HEADER SECTION ;; id = 41534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN A 178.62.233.48 dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190303181855 20190217181855 1651 dnscrypt.pl. JGaF+OymN4BdnrTdBKbInpQdE2o5kO/UGKp5qYNH8Dth0aEFokQRFRzAQVPL3cKeQf+J8gVb389R /CqB4dkAzOIg9lSTwYuI/VB38cVvUZ9STl5HMLN1Lluv30x/dEjF+pqu3d5zDo/gCPtgMct+9Ddt cQetpcaFTBB7Vwn0Je4= ) dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190303181855 20190217181855 1802 dnscrypt.pl. m30bPBNGM4oTQqwckj8fRvLIzVV8kIrt/pj4vn9pB27yOlZFZ25j3IhK04BZFLMKO7bjuuTzNgZa zQq28AXIAcecbstzyBl27H6nBFVTof4EZYfd81ZtERdqvQ/pT8g3TdQl2CLkqjNe5f2cWhiyvWzD P1tQnhWO9mXv2PvwC1I= ) dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190303181855 20190217181855 55894 dnscrypt.pl. A0eUDuCAtki2zExk654mw3KrITgKA+JJd1t3JSunu11L/LmqPSM+4xk/xSKHsHoBdvAOvD71KA2K jpV7iT1ILw== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190303181855 20190217181855 1651 dnscrypt.pl. dMPi/FRCQsyVcTpn3QrbfyYeAxA9pfpM0k5+b8NRnvOPY/+9bu8Y8Qe1ypgcL+pRg0TlZIjJpE2N AvkflAAJ95SvSAufJrcVX0wZ1cZvIkUrLdYLC0YUGt/ftTRdM9utngGKA3mUh9+ocWJ2hxB4zTQN Jr/XjRL5/XIqSp/V4Hk= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190303181855 20190217181855 1802 dnscrypt.pl. e6Clyf4oZmmDgpwcSGugXH+9OrqHXYdL/ZVNnzCLQoE6KRmupCib5ka2EzGMAHouAjwSJkEAg9G/ ScVQp0mK3r7fMGZ+7/C96/+fzEHLgqO1RRaPl948vkJNcnit2C3lGSWWcOvdmN++k+rTU5BLqwZ7 Ta2A5qhbWSX/XSyTcqQ= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190303181855 20190217181855 55894 dnscrypt.pl. kbn4ZGlzhHFfXmJ6DhYVE0oNOPygyNYpECmKPcPblcTkyAVxldKFZnjFYfmGvmZhBTQ8ljMK+x0X /x6b+TKU1Q== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnscrypt.pl is authoritative for dnscrypt.pl
	Found RRSIG signed by dnscrypt.pl zone
	Query to fns1.42.pl for dnscrypt.pl/SOA
	Received 1097 bytes from 79.98.145.34
	;; Answer received from 79.98.145.34 (1097 bytes) ;; HEADER SECTION ;; id = 1984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN SOA ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN SOA ( fns1.42.pl. dnscrypt.soltysiak.com. 2018042351 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) dnscrypt.pl. 86400 IN RRSIG ( SOA 5 2 86400 20190303181855 20190217181855 1651 dnscrypt.pl. JYwUlFrQ5Gw9n+vF54lTSUWjuXZaWgKE+RhUix91BXuniFozsdqVYpWtiBF+xeb72Lu0vsJQ8/91 LH3D1Jgx2yc94XUwWTib3At73R9gEBYIlMr6Gz2sau+hzw/eekhR91lG3SrCj/OcVcCm5Ve0muQK 2U/G8eZ28APmp0J/PCM= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 7 2 86400 20190303181855 20190217181855 1802 dnscrypt.pl. VvliEG7hpKr15X2QPbkr5eJjPECYG3eiAYZThlR16hTEp/gXBOV+W65B/LRUjCWnKD2ZzaJkLhhW 5cNvExq4fVtSc7F8vL+raCR8IntPk61u5sLH6anu7Z2WsALT1v4y1RlmFXpraZldfUhP/4V85Kq+ YKZK5Xzkeb3vWchG+J4= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 13 2 86400 20190303181855 20190217181855 55894 dnscrypt.pl. l6MLw73DZOi2Pf93jdedc73D2yI45D3VPGudzALjlLLQfQK2CSuiRvtel3PJXQPLNohspw7BDiwj eDmKXJa29A== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190303181855 20190217181855 1651 dnscrypt.pl. dMPi/FRCQsyVcTpn3QrbfyYeAxA9pfpM0k5+b8NRnvOPY/+9bu8Y8Qe1ypgcL+pRg0TlZIjJpE2N AvkflAAJ95SvSAufJrcVX0wZ1cZvIkUrLdYLC0YUGt/ftTRdM9utngGKA3mUh9+ocWJ2hxB4zTQN Jr/XjRL5/XIqSp/V4Hk= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190303181855 20190217181855 1802 dnscrypt.pl. e6Clyf4oZmmDgpwcSGugXH+9OrqHXYdL/ZVNnzCLQoE6KRmupCib5ka2EzGMAHouAjwSJkEAg9G/ ScVQp0mK3r7fMGZ+7/C96/+fzEHLgqO1RRaPl948vkJNcnit2C3lGSWWcOvdmN++k+rTU5BLqwZ7 Ta2A5qhbWSX/XSyTcqQ= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190303181855 20190217181855 55894 dnscrypt.pl. kbn4ZGlzhHFfXmJ6DhYVE0oNOPygyNYpECmKPcPblcTkyAVxldKFZnjFYfmGvmZhBTQ8ljMK+x0X /x6b+TKU1Q== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fns2.42.pl for dnscrypt.pl/SOA
	Received 1097 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1097 bytes) ;; HEADER SECTION ;; id = 21967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN SOA ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN SOA ( fns1.42.pl. dnscrypt.soltysiak.com. 2018042351 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) dnscrypt.pl. 86400 IN RRSIG ( SOA 5 2 86400 20190303181855 20190217181855 1651 dnscrypt.pl. JYwUlFrQ5Gw9n+vF54lTSUWjuXZaWgKE+RhUix91BXuniFozsdqVYpWtiBF+xeb72Lu0vsJQ8/91 LH3D1Jgx2yc94XUwWTib3At73R9gEBYIlMr6Gz2sau+hzw/eekhR91lG3SrCj/OcVcCm5Ve0muQK 2U/G8eZ28APmp0J/PCM= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 7 2 86400 20190303181855 20190217181855 1802 dnscrypt.pl. VvliEG7hpKr15X2QPbkr5eJjPECYG3eiAYZThlR16hTEp/gXBOV+W65B/LRUjCWnKD2ZzaJkLhhW 5cNvExq4fVtSc7F8vL+raCR8IntPk61u5sLH6anu7Z2WsALT1v4y1RlmFXpraZldfUhP/4V85Kq+ YKZK5Xzkeb3vWchG+J4= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 13 2 86400 20190303181855 20190217181855 55894 dnscrypt.pl. l6MLw73DZOi2Pf93jdedc73D2yI45D3VPGudzALjlLLQfQK2CSuiRvtel3PJXQPLNohspw7BDiwj eDmKXJa29A== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190303181855 20190217181855 1651 dnscrypt.pl. dMPi/FRCQsyVcTpn3QrbfyYeAxA9pfpM0k5+b8NRnvOPY/+9bu8Y8Qe1ypgcL+pRg0TlZIjJpE2N AvkflAAJ95SvSAufJrcVX0wZ1cZvIkUrLdYLC0YUGt/ftTRdM9utngGKA3mUh9+ocWJ2hxB4zTQN Jr/XjRL5/XIqSp/V4Hk= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190303181855 20190217181855 1802 dnscrypt.pl. e6Clyf4oZmmDgpwcSGugXH+9OrqHXYdL/ZVNnzCLQoE6KRmupCib5ka2EzGMAHouAjwSJkEAg9G/ ScVQp0mK3r7fMGZ+7/C96/+fzEHLgqO1RRaPl948vkJNcnit2C3lGSWWcOvdmN++k+rTU5BLqwZ7 Ta2A5qhbWSX/XSyTcqQ= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190303181855 20190217181855 55894 dnscrypt.pl. kbn4ZGlzhHFfXmJ6DhYVE0oNOPygyNYpECmKPcPblcTkyAVxldKFZnjFYfmGvmZhBTQ8ljMK+x0X /x6b+TKU1Q== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fns2.42.pl for dnscrypt.pl/A
	Received 1055 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1055 bytes) ;; HEADER SECTION ;; id = 48676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN A 178.62.233.48 dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190303181855 20190217181855 1651 dnscrypt.pl. JGaF+OymN4BdnrTdBKbInpQdE2o5kO/UGKp5qYNH8Dth0aEFokQRFRzAQVPL3cKeQf+J8gVb389R /CqB4dkAzOIg9lSTwYuI/VB38cVvUZ9STl5HMLN1Lluv30x/dEjF+pqu3d5zDo/gCPtgMct+9Ddt cQetpcaFTBB7Vwn0Je4= ) dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190303181855 20190217181855 1802 dnscrypt.pl. m30bPBNGM4oTQqwckj8fRvLIzVV8kIrt/pj4vn9pB27yOlZFZ25j3IhK04BZFLMKO7bjuuTzNgZa zQq28AXIAcecbstzyBl27H6nBFVTof4EZYfd81ZtERdqvQ/pT8g3TdQl2CLkqjNe5f2cWhiyvWzD P1tQnhWO9mXv2PvwC1I= ) dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190303181855 20190217181855 55894 dnscrypt.pl. A0eUDuCAtki2zExk654mw3KrITgKA+JJd1t3JSunu11L/LmqPSM+4xk/xSKHsHoBdvAOvD71KA2K jpV7iT1ILw== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190303181855 20190217181855 1651 dnscrypt.pl. dMPi/FRCQsyVcTpn3QrbfyYeAxA9pfpM0k5+b8NRnvOPY/+9bu8Y8Qe1ypgcL+pRg0TlZIjJpE2N AvkflAAJ95SvSAufJrcVX0wZ1cZvIkUrLdYLC0YUGt/ftTRdM9utngGKA3mUh9+ocWJ2hxB4zTQN Jr/XjRL5/XIqSp/V4Hk= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190303181855 20190217181855 1802 dnscrypt.pl. e6Clyf4oZmmDgpwcSGugXH+9OrqHXYdL/ZVNnzCLQoE6KRmupCib5ka2EzGMAHouAjwSJkEAg9G/ ScVQp0mK3r7fMGZ+7/C96/+fzEHLgqO1RRaPl948vkJNcnit2C3lGSWWcOvdmN++k+rTU5BLqwZ7 Ta2A5qhbWSX/XSyTcqQ= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190303181855 20190217181855 55894 dnscrypt.pl. kbn4ZGlzhHFfXmJ6DhYVE0oNOPygyNYpECmKPcPblcTkyAVxldKFZnjFYfmGvmZhBTQ8ljMK+x0X /x6b+TKU1Q== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnscrypt.pl A RR has value 178.62.233.48
	Found 3 RRSIGs over A RRset
	`dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190303181855 20190217181855 1651 dnscrypt.pl. JGaF+OymN4BdnrTdBKbInpQdE2o5kO/UGKp5qYNH8Dth0aEFokQRFRzAQVPL3cKeQf+J8gVb389R /CqB4dkAzOIg9lSTwYuI/VB38cVvUZ9STl5HMLN1Lluv30x/dEjF+pqu3d5zDo/gCPtgMct+9Ddt cQetpcaFTBB7Vwn0Je4= )`
	`dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190303181855 20190217181855 1802 dnscrypt.pl. m30bPBNGM4oTQqwckj8fRvLIzVV8kIrt/pj4vn9pB27yOlZFZ25j3IhK04BZFLMKO7bjuuTzNgZa zQq28AXIAcecbstzyBl27H6nBFVTof4EZYfd81ZtERdqvQ/pT8g3TdQl2CLkqjNe5f2cWhiyvWzD P1tQnhWO9mXv2PvwC1I= )`
	`dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190303181855 20190217181855 55894 dnscrypt.pl. A0eUDuCAtki2zExk654mw3KrITgKA+JJd1t3JSunu11L/LmqPSM+4xk/xSKHsHoBdvAOvD71KA2K jpV7iT1ILw== )`
	RRSIG=1651 and DNSKEY=1651 verifies the A RRset
	RRSIG=1802 and DNSKEY=1802 verifies the A RRset
	RRSIG=55894 and DNSKEY=55894 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnscrypt.pl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: